CVEs published April 6, 2026
77,396 CVEs in 2026
The restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated.
Lupa integrates the runtimes of Lua or LuaJIT2 into CPython.
SandboxJS blocks direct assignment to global objects (for example Math.random = ...), but this protection can be bypassed through an exposed callable constructor path: this.constructor.call(target,…
TdeleteFile() missing return after path traversal check.
The POST multipart upload directory not sanitized.
PUT upload in httpserver/updown.go has no path sanitization.
EcclesiaCRM is CRM Software for church management.
Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner.
Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG environment variable and loads it without validation.
Users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server.
An Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable scripts.
When uploading a JPEG, a user can specify an optional password to accompany the JPEG.
Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan (RAT).
The following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handlers[] and ule_optional_ext_handlers[] tables in…
An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.
A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
PyLoad has a server-side request forgery (SSRF) vulnerability.
A path traversal vulnerability exists in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder.
Users can save extention settings in "py" format and in the app root directory.
fast-jwt provides fast JSON Web Token (JWT) implementation.
When JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key.
fast-jwt provides fast JSON Web Token (JWT) implementation.
Template injection by an administrator lead to RCE.
The application fails to properly sanitize user-controlled input when users update their profile name (e.g., full name / username).
Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the…
Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate…
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to…
A weakness has been identified in Tenda CX12L 16.03.53.12.
A security flaw has been discovered in Tenda CX12L 16.03.53.12.
A vulnerability was identified in Tenda CX12L 16.03.53.12.
A vulnerability was detected in Belkin F9K1015 1.00.10.
A security vulnerability has been detected in Belkin F9K1015 1.00.10.
A security flaw has been discovered in Belkin F9K1015 1.00.10.
A vulnerability was identified in Belkin F9K1015 1.00.10.
A vulnerability was determined in Belkin F9K1015 1.00.10.
A vulnerability was found in Belkin F9K1015 1.00.10.
A vulnerability has been found in Belkin F9K1015 1.00.10.
A flaw has been found in Tenda i12 1.0.0.11(3862).
A vulnerability was detected in Belkin F9K1122 1.00.33.
A weakness has been identified in Tenda CH22 1.0.0.1.
Confronta_righe.php files across different modules in OpenSTAManager contain an SQL Injection vulnerability.
WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php.
Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete…
This vulnerability is a missing authorization check found in the update role endpoint at routes/web.php.
An unrestricted file upload vulnerability exists in the CKEditor upload functionality.
The Dockerfile generation function generate_containerfile() in src/bentoml/_internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extension to render user-provided…
The /config/update endpoint does not enforce admin role authorization.
A DOM-based Cross-Site Scripting (XSS) vulnerability has been discovered in Homarr's /auth/login page.
The following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets…
The following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->sk under sco_conn_lock() but immediately…
Directus's Single Sign-On (SSO) login pages lacked a Cross-Origin-Opener-Policy (COOP) HTTP response header.
The ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam).
Curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl.
A CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant:…
The mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent system without any scheme validation, allowing execution of arbitrary Android intents, including USSD codes,…
A modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file.
Aggregate functions (min, max) applied to fields with the conceal special type incorrectly return raw database values instead of the masked placeholder.
The PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users.
A path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret.
An unauthenticated time-based blind SQL injection exists in GLPI's Search engine.
A vulnerability was determined in Tenda CX12L 16.03.53.12.
The cloud deployment path in src/bentoml/_internal/cloud/deployment.py was not included in the fix for CVE-2026-33744.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
The following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() After cancel_delayed_work_sync() is called from xfrm_nat_keepalive_net_fini(),…
Memory Corruption when handling power management requests with improperly sized input/output buffers.
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
Memory Corruption when retrieving output buffer with insufficient size validation.
A Server-Side Request Forgery (SSRF) protection bypass has been identified and fixed in Directus.
The parse_urls API function in src/pyload/core/api/__init__.py fetches arbitrary URLs server-side via get_url(url) (pycurl) without any URL validation, protocol restriction, or IP blacklist.
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
The getClientIP() function in lib/admin/session.ts trusted the first (leftmost) entry of the X-Forwarded-For header, which is fully controlled by the client.
S/MIME signature verification did not validate the certificate trust chain (checkChain: false).
@hapi/content provided HTTP Content-* headers parsing.
defu is software that allows uers to assign default properties recursively.
A crafted VP9 RTP packet with a 1-byte payload (0xFF, all flags set) causes the parser to read past the end of the allocated buffer, resulting in a heap-buffer-overflow.
HAX CMS helps manage microsite universe with PHP or NodeJs backends.
Distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled.
fast-jwt provides fast JSON Web Token (JWT) implementation.
Ech0 implements link preview (editor fetches a page title) through GET /api/website/title.
A missing encryption vulnerability affects inter-Node Pod traffic.
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT)…
The auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter.
The @nyariv/sandboxjs parser contains unbounded recursion in the restOfExp function and the lispify/lispifyExpr call chain.
1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote document loader and authenticated document loader without enforcing a maximum redirect count or visited-URL loop…
In pull-through cache mode, distribution discovers token auth endpoints by parsing WWW-Authenticate challenges returned by the configured upstream registry.
OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.
An unauthenticated user can store an XSS payload through the inventory endpoint.
A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.
A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.
A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413.
A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0.
A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A security vulnerability has been detected in code-projects Online FIR System 1.0.
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0.
A flaw has been found in code-projects Simple Laundry System 1.0.
A security vulnerability has been detected in code-projects Easy Blog Site 1.0.
A weakness has been identified in projectworlds Car Rental System 1.0.
A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A security vulnerability has been detected in projectworlds Car Rental System 1.0.
A vulnerability was identified in projectworlds Car Rental Project 1.0.
A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3.
A vulnerability was found in assafelovic gpt-researcher up to 3.4.3.
A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3.
A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1.
The GET /api/website/title endpoint accepts an arbitrary URL via the website_url query parameter and makes a server-side HTTP request to it without any validation of the target host or IP address.
The application fails to properly sanitize user-controlled input within System Settings – Company Information.
A scope modification vulnerability exists in @nyariv/sandboxjs.
An authenticated user can perform a SQL injection via the logs export feature.
An authenticated technician user can store an XSS payload in a supplier fields.
Pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size (cm_num).
Directus' TUS resumable upload endpoint (/files/tus) allows any authenticated user with basic file upload permissions to overwrite arbitrary existing files by UUID.
An Insecure Direct Object Reference (IDOR) vulnerability exists in the article image deletion feature.
A heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds heap memory access when parsing a crafted .pof file.
A heap-buffer-overflow read vulnerability exists in BitParser::parseHeader() that allows out-of-bounds heap memory access when parsing a crafted .bit file.
The _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
The following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp and ctnetlink.
A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
Certain dye template expressions would result in execution of arbitrary code.
Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory.
Directus' GraphQL endpoints (/graphql and /graphql/system) did not deduplicate resolver invocations within a single request.
An authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser.
An IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions (Edit Post, Edit Draft, Edit Own Post, Edit Own Draft) to modify posts they do not own…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from…
A Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server.
The VideoMediaIO.load_base64() method at vllm/multimodal/media/video.py splits video/jpeg data URLs by comma to extract individual JPEG frames, but does not enforce a frame count limit.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account.
A flaw has been found in itsourcecode sanitize or validate this input 1.0.
A vulnerability was found in itsourcecode Construction Management System 1.0.
A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A vulnerability was determined in itsourcecode Construction Management System 1.0.
A vulnerability was found in pytries datrie up to 0.8.3.
A vulnerability has been found in code-projects Online Application System for Admission 1.0.
A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1.
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1.
A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1.
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1.
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1.
A vulnerability was identified in hcengineering Huly Platform 0.7.382.
A vulnerability has been found in itsourcecode Construction Management System 1.0.
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0.
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1.
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().
This could lead to local denial of service with no additional execution privileges needed.
The redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header("Location: ...") call.
Open redirect has been found in WeGIA webapp.
An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and…
An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and…
An open redirect vulnerability exists in the login redirection logic.
A stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename.
An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos &…
An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and…
The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter.
Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input before rendering it in the page response.
A reflected DOM-based XSS vulnerability in taillog.js allows an unauthenticated attacker to inject arbitrary HTML into the Pi-hole admin interface by crafting a malicious URL.
A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
FileService.download_from_url() in app/services/file_service.py calls requests.get(url) with zero URL validation.
A flaw was found in libtheora.
A vulnerability was detected in kalcaddle kodbox up to 1.64.
A vulnerability was found in Tenda CX12L 16.03.53.12.
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_B20221024.
The following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Use sb->s_uuid for a proper volume identifier as the primary choice.
The reverse proxy (proxy.ts) set the Content-Security-Policy-Report-Only header instead of the enforcing Content-Security-Policy header.
Any approved streamer can inject arbitrary HTML into /streamer and the homepage “Live streams” widget by placing markup in their Twitch/YouTube stream title.
A file can be uploaded with a filename extension that passes the file extension allowlist (e.g., .txt) but with a Content-Type header that differs from the extension (e.g., text/html).
Links and image links in the default markdown to HTML renderer are not properly escaped.
Tandoor Recipes allows authenticated users to inject arbitrary <style> tags into recipe step instructions.
A server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the…
Configuration values from the /api/config endpoint are placed directly into HTML value="" attributes without escaping in settings-advanced.js, enabling HTML attribute injection.
Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted…
An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the…
An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload…
An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter.
An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload…
A stored cross-site scripting (XSS) vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent…
A vulnerability was detected in code-projects Online FIR System 1.0.
A vulnerability was identified in Free5GC 4.2.0.
A vulnerability was found in code-projects Online Application System for Admission 1.0.
A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1.
A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0.
A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5.
The plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication.
The plugin/API/check.ffmpeg.json.php endpoint probes the FFmpeg remote server configuration and returns connectivity status without any authentication.
The install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die() statement.
When GRAPHQL_INTROSPECTION=false is configured, Directus correctly blocks standard GraphQL introspection queries (__schema, __type).
The SocialMediaPublisher plugin exposes a publishInstagram.json.php endpoint that acts as an unauthenticated proxy to the Facebook/Instagram Graph API.
A flaw was found in tar.
Under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload…
Open edX Platform enables the authoring and delivery of online learning at any scale.
An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface.
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function.
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function.
UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function.
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function.
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function.
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function.
UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function.
A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A flaw has been found in assafelovic gpt-researcher up to 3.4.3.
A weakness has been identified in assafelovic gpt-researcher up to 3.4.3.
A security flaw has been discovered in ProjectSend r2002.
A weakness has been identified in givanz Vvvebjs up to 2.0.5.
Directus is vulnerable to an open redirect via the redirect query parameter on the /admin/tfa-setup page.
The player skin configuration endpoint at admin/playerUpdate.json.php does not validate CSRF tokens.
The site customization endpoint at admin/customize_settings_nativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes.
Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.
The user registration endpoint (/api/trpc/user.register) is vulnerable to a race condition that allows an attacker to create multiple user accounts from a single-use invite token.
A path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906.
A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android.
A vulnerability was determined in hcengineering Huly Platform 0.7.382.
A flaw was found in Keycloak.
The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication.
Client hostnames and IP addresses from the FTL database are rendered into the DOM without escaping in network.js (Network page) and charts.js/index.js (Dashboard chart tooltips).
The formatInfo() function in queries.js renders data.upstream, data.client.ip, and data.ede.text into HTML without escaping when a user expands a query row in the Query Log, enabling stored HTML injection.
A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A vulnerability was detected in code-projects Online Shoe Store 1.0.
A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.
40.8.5, 41.1.0, and 42.0.0-alpha.5, apps that use offscreen rendering with GPU shared textures may be vulnerable to a use-after-free.